gnutls-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: solutions


From: Nikos Mavrogiannopoulos
Subject: Re: solutions
Date: Tue, 04 Aug 2009 19:41:51 +0300
User-agent: Thunderbird 2.0.0.22 (X11/20090608)

Simon Josefsson wrote:

>>>>    return 0;
>>>>  }
>>> Hi Nikos -- this code crashed the self-tests, but I fixed that.
>>>
>>> However, isn't this the wrong way to address the real problem?  It seems
>>> callers of the function should be fixed to be careful not to assume
>>> decoded data does not contain NULs?
>> A null byte there is really malicious (why would a string contain a null
>> byte?).
> 
> The standards permit it...

To be precise it is only allowed if a the string is tagged as ia5String.
Other types do not allow null.






reply via email to

[Prev in Thread] Current Thread [Next in Thread]